User Attributes - Inside Active Directory

Related to the book Inside Active Directory, ISBN 0-201-61621-1 Copyright (C) 2002 by Sakari Kouti Version: December 21, 2001 Back to the book's Web site

Attr LDAP Name accountExpires accountNameHistory aCSPolicyName adminCount adminDescription adminDisplayName allowedAttributes allowedAttributesEffective allowedChildClasses allowedChildClassesEffective altSecurityIdentities assistant badPasswordTime badPwdCount bridgeheadServerListBL c canonicalName cn co codePage

AttrDisplayName ADUC Tab Account

ADUC Field Account expires

Property Set

StaticPropertyMethod Hid

AccountRestrictionsAccountExpirationDate

Yes Yes General Information PublicInformation PublicInformation PublicInformation PublicInformation PublicInformation Personal Information LastFailedLogin LogonInformation BadLoginCount Country Abbreviation Address Object Name Country Address Country/region Fully qualified domain name of object Country/region PublicInformation PublicInformation General Personal Information

Yes Yes Yes Yes

Assistant

Yes Yes Yes

Yes

Yes

Yes Yes Yes

comment company controlAccessRights countryCode createTimeStamp dBCSPwd defaultClassStore department description desktopProfile destinationIndicator directReports displayName displayNamePrintable distinguishedName division dSASignature dSCorePropagationData dynamicLDAPServer employeeID extensionName facsimileTelephoneNumber flags fromEntry frsComputerReferenceBL fRSMemberReferenceBL

Comment Company Organization Address Company Country/region

Information General Information PublicInformation General Information

Yes

Yes

Yes Yes Yes Department Description Organization General Department Description PublicInformation Department PublicInformation Description

Yes DirectReports DisplayName X500 DistinguishedName Division Organization General Directreports Displayname PublicInformation General FullName Information PublicInformation PublicInformation PublicInformation Division

Yes

Yes

Yes Yes Yes Employee ID Fax Number Telephones Fax Personal Information EmployeeID FaxNumber

Yes

Yes Yes Yes Yes

fSMORoleOwner garbageCollPeriod generationQualifier givenName groupMembershipSAM groupPriority groupsToIgnore homeDirectory homeDrive homePhone homePostalAddress info initials instanceType internationalISDNNumber ipPhone isCriticalSystemObject isDeleted isPrivilegeHolder l lastKnownParent lastLogoff lastLogon legacyExchangeDN lmPwdHistory

GenerationalSuffix FirstName General

Firstname

NameSuffix PublicInformation FirstName

Yes Yes Yes

Yes Yes Home Folder Home Drive Home Phone Home Address Notes Initials International ISDN Number (Others) IP PhoneNumber Telephones IP phone Telephones General Notes Initials Profile Profile Telephones Home folder: Local path/To Home folder: Connect Home LogonInformation HomeDirectory LogonInformation Personal TelephoneHome Information Personal Information Personal Information PublicInformation Personal Information Personal Information

Yes

Yes Yes Yes City Address City Personal Information LogonInformation LastLogoff LogonInformation LastLogin PublicInformation

Yes

Yes Yes Yes Yes Yes

localeID lockoutTime logonCount logonHours logonWorkstation mail managedObjects manager masteredBy maxStorage memberOf mhsORAddress middleName mobile modifyTimeStamp mS-DS-ConsistencyChildCount mS-DS-ConsistencyGuid mS-DS-CreatorSID mSMQDigests mSMQDigestsMig mSMQSignCertificates mSMQSignCertificatesMig msNPAllowDialin msNPCallingStationID msNPSavedCallingStationID msRADIUSCallbackNumber

Account Account E-Mail Address Manager General Organization

Accountislockedout LogonHours E-mail Manager LogonInformation LogonInformation LoginHours LogonInformation PublicInformation EmailAddress PublicInformation Manager MaxStorage

Yes Yes Yes

Yes Yes

Yes Yes

GroupMembership Member Of MiddleName Mobile Number Telephones

Member of OtherName Mobile Personal Information TelephoneMobile

Yes

Yes Yes Yes Personal Information Personal Information Remote Access Information Remote Access Information Remote Access Information

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

msRADIUSFramedIPAddress msRADIUSFramedRoute msRADIUSServiceType msRASSavedCallbackNumber msRASSavedFramedIPAddress msRASSavedFramedRoute name netbootSCPBL networkAddress nonSecurityMemberBL ntPwdHistory nTSecurityDescriptor o objectCategory objectClass objectGUID objectSid objectVersion operatorCount otherFacsimileTelephoneNumber otherHomePhone otherIpPhone otherLoginWorkstations otherMailbox E-Mail Address (Others) Fax Number (Others) Home Phone (Others) IP PhoneNumber (Others) Telephones Telephones Telephones

Remote Access Information Remote Access Information Remote Access Information

Yes

Yes

Yes

PublicInformation

Security

N/A PublicInformation PublicInformation PublicInformation PublicInformation General Information

Object

Objectclass

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Yes Yes Personal Information Personal Home Phone (Others) Information Personal IP PhoneNumber (Others) Information Fax Number (Others) PublicInformation

otherMobile otherPager otherTelephone otherWellKnownObjects ou pager partialAttributeDeletionList partialAttributeSet personalTitle physicalDeliveryOfficeName possibleInferiors postalAddress postalCode postOfficeBox preferredDeliveryMethod preferredOU primaryGroupID primaryInternationalISDNNumber primaryTelexNumber

Mobile Number (Others) PagerNumber (Others) PhoneNumber (Others)

Telephones Telephones General

Mobile Number (Others) PagerNumber (Others) PhoneNumber (Others)

Personal Information Personal Information Personal Information PublicInformation Personal TelephonePager Information

Yes Yes

PagerNumber

Telephones

Pager

Yes Yes Title Office Location General Office Personal Information Personal Information Personal Information Personal Information Personal Information Personal Information General Information Personal Information Personal Information NamePrefix OfficeLocations

Yes

Yes PostalAddresses PostalCodes

ZIP/Postal Code Post Office Box

Address Address

Zip/Postal Code P.O. Box

Yes

Yes Member Of International ISDN Number TelexNumber Primarygroup

Yes

Yes

Yes

profilePath proxiedObjectName proxyAddresses pwdLastSet queryPolicyBL registeredAddress replPropertyMetaData replUpToDateVector repsFrom repsTo revision rid sAMAccountName sAMAccountType scriptPath sDRightsEffective securityIdentifier seeAlso serverReferenceBL servicePrincipalName showInAddressBook showInAdvancedViewOnly sIDHistory siteObjectBL sn st LastName State/Province

Profile

Profilepath

LogonInformation Profile

LogonName (preAccount Windows 2000)

Userlogonname (preWindows 2000)

Profile

Logon script

General Address

Lastname State/province

Yes PublicInformation Yes AccountRestrictionsPasswordLastChanged Yes Yes Personal Yes Information Yes Yes Yes Yes Yes Yes General Information General Yes Information LoginScript Yes General Yes Information Yes SeeAlso Yes Yes PublicInformation Yes PublicInformation Yes General Yes Information General Yes Information Yes PublicInformation LastName Yes Personal Yes

street streetAddress subRefs subSchemaSubEntry supplementalCredentials systemFlags telephoneNumber teletexTerminalIdentifier telexNumber terminalServer textEncodedORAddress thumbnailLogo thumbnailPhoto title tokenGroups tokenGroupsGlobalAndUniversal tokenGroupsNoGCAcceptable unicodePwd url userAccountControl userCert Web Page Address General (Others) Account Web Page Address (Others) Accountoptions Job Title Organization Title TelexNumber (Others) TelephoneNumber General Telephonenumber Street Address Address Street

Information Personal Information Personal Information

PublicInformation Personal TelephoneNumber Information Personal Information Personal Information

Yes Yes Yes Yes

Yes

Yes

Yes Yes Personal Picture Information PublicInformation Title Remote Access Information Remote Access Information Remote Access Information Web Information AccountRestrictions Personal

Yes

Yes

Yes

Yes

userCertificate userParameters userPassword userPrincipalName userSharedFolder userSharedFolderOther userSMIMECertificate userWorkstations uSNChanged uSNCreated uSNDSALastObjRemoved USNIntersite uSNLastObjRem uSNSource wbemPath wellKnownObjects whenChanged whenCreated wWWHomePage x121Address 207 55 55 Non-MappedTabs PublishedCertificates LogonWorkstationsAccount Object Object Log OnTo/LogonWorkstations Current USN Original USN

Information Personal Information AccountRestrictions LogonName Account Userlogonname PublicInformation Personal Information Personal Information Personal Information LoginWorkstations

Yes

Yes

Object Object Web Page Address General

Modified Created Web page

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Web Information HomePage Personal Information 55 110

Yes 36